Potential lock of rewards in the custody contracts

Lines of code Vulnerability details Impact The swaptostabledenom function in the custody contracts swaps all other native tokens into a specific one. The function creates swap messages for all the other native tokens and adds them as sub-messages, and handles the reply only when the last...

PT-2022-17364

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21 Description A stack overflow was discovered in the function sub 42E328, allowing attackers to cause a Denial of Service DoS via the list parameter. Recommendations For Tenda AX12 version 22.03.01.21, consider...

PT-2022-12691

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21 Description A stack buffer overflow was discovered in the function sub 422CE4, allowing attackers to cause a Denial of Service DoS via the strcpy parameter. Recommendations For Tenda AX12 version 22.03.01.21,...

Inconsistency behavior between bAsset tokens and the standard cw20 tokens

Lines of code Vulnerability details Impact The implementation of the send function of bAsset tokens is inconsistent with the standard cw20's implementation. In the standard implementation, the msg and the transfer amount are passed to the recipient contract as a regular message. However, in the...

PT-2022-17368

Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.21 Description A stack overflow was discovered in the function sub 4327CC, allowing attackers to cause a Denial of Service DoS via the list parameter. Recommendations For Tenda AX12 version 22.03.01.21, consider...

WordPress的Hotscot Contact Form插件 SQL注入漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.A SQL injection vulnerability exists in WordPress Hotscot Contact Form, which stems from a view submission featu...

PT-2022-9463

Name of the Vulnerable Software and Affected Versions Hotscot Contact Form WordPress plugin versions prior to 1.3 Description The issue concerns the view submission functionality in the plugin, which makes a GET request with the sub id parameter. This parameter is not sanitized, escaped, or...

Solaris/SPARC - setuid(0) + chmod (/bin/ksh) + exit(0) Shellcode

/ sparcsolarischmod.c - Solaris/SPARC chmod shellcode Copyright c 2022 Marco Ivaldi Solaris/SPARC setuid/chmod/exit shellcode. Tested on: SunOS 5.10 GenericVirtual sun4u sparc SUNW,SPARC-Enterprise / char sc = / Solaris/SPARC chmod shellcode 12 + 32 + 20 = 64 bytes / / setuid0 / "\x90\x08\x3f\xff...

PT-2022-10650

Name of the Vulnerable Software and Affected Versions Xerox Phaser 4622 version 35.013.01.000 Description A buffer overflow issue was discovered in the function sub 3226AC via the TIMEZONE variable, allowing attackers to cause a Denial of Service DoS via crafted overflow data. Recommendations For...

PT-2022-36833

Name of the Vulnerable Software and Affected Versions coap affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the coap split uri sub and coap get uri path functions. Recommendations At the moment, there is no information about a newer...

PT-2022-36821

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the coap split uri sub and coap get uri path functions. Recommendations At the...

CVE-2021-46664

MariaDB through 10.5.9 allows an application crash in subselectpostjoinaggr for a NULL value of aggr...

MariaDB DoS Vulnerability (MDEV-25761) - Windows

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

CVE-2021-24937

The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacuselectedsubtabarea parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue...

PT-2022-9517

Name of the Vulnerable Software and Affected Versions The Asset CleanUp: Page Speed Booster WordPress plugin versions prior to 1.3.8.5 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the wpacu selected sub tab area parameter is not properly escaped...

Security update for log4j12 (important)

openSUSE Security Update: Security update for log4j12 Announcement ID: openSUSE-SU-2022:0226-1 Rating: important References: 1193184 1194842 1194843 1194844 Cross-References: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVSS scores: CVE-2022-23302 NVD : 8.8...

Add Subtitle <= 1.1.0 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks The classic editor plugin is needed to see the sub-title field - Create a post a...

Add Subtitle <= 1.1.0 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks PoC The classic editor plugin is needed to see the sub-title field - Create a...

Fedora: Security Advisory for btrbk (FEDORA-2022-a66734e7a2)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: btrbk-0.31.3-1.fc35

Backup tool for btrfs sub-volumes, using a configuration file, allows creation of backups from multiple sources to multiple destinations, with ssh and flexible retention policy support hourly, daily, weekly, monthly...